How many url-parse project url-parse CVEs are in CISA KEV?

None of url-parse project url-parse's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of url-parse project url-parse are affected?

15 distinct url-parse project url-parse versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in url-parse project url-parse CVEs?

url-parse project url-parse's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-20 (Improper Input Validation), CWE-425 (Direct Request ('Forced Browsing')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

How many critical url-parse project url-parse vulnerabilities are there?

url-parse project url-parse has 3 critical and 0 high-severity CVEs.

What is the average severity of url-parse project url-parse CVEs?

The average CVSS base score across url-parse project url-parse's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

url-parse project

8 CVEs

url-parse project url-parse Vulnerabilities

Name: url-parse project url-parse vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for url-parse by url-parse project.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.0

Avg CVSS

2018–2022

Last updated February 21, 2022

Overview

url-parse project url-parse has 8 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting url-parse project url-parse, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of url-parse project url-parse's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High0

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of url-parse project url-parse's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No url-parse project url-parse CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every url-parse project url-parse version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.4.31 CVE
< 1.5.01 CVE
< 1.5.21 CVE
< 1.5.61 CVE
< 1.5.71 CVE
< 1.5.81 CVE
< 1.5.91 CVE
<= 1.4.41 CVE

Fixed in

1.4.31 CVE
1.5.01 CVE
1.5.21 CVE
1.5.61 CVE
1.5.71 CVE
1.5.81 CVE
1.5.91 CVE

Find a version

8 CVEs

Sort

Critical vulnerability · 2022-02-21
CVE-2022-0691
Patch
CWE-639
Critical · CVSS 9.8
EPSS 2.2% (81th pct)2022-02-21
Critical vulnerability · 2022-02-20
CVE-2022-0686
Patch
CWE-639
Critical · CVSS 9.1
EPSS 1.8% (77th pct)2022-02-20
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
CVE-2022-0639
Patch
CWE-639
Medium · CVSS 5.3
EPSS 1.5% (72th pct)2022-02-17
Medium vulnerability · 2022-02-14
CVE-2022-0512
Patch
CWE-639
Medium · CVSS 5.3
EPSS 1.8% (76th pct)2022-02-14
Open Redirect in unshiftio/url-parse
CVE-2021-3664
Patch
CWE-601
Medium · CVSS 6.1
EPSS 1.8% (77th pct)2021-07-26
Medium vulnerability · 2021-02-21
CVE-2021-27515
Patch
Medium · CVSS 5.3
EPSS 2.0% (78th pct)2021-02-21
Medium vulnerability · 2020-02-04
CVE-2020-8124
Patch
CWE-20
Medium · CVSS 5.3
EPSS 1.7% (74th pct)2020-02-04
Critical vulnerability · 2018-08-12
CVE-2018-3774
Patch
CWE-425
Critical · CVSS 10.0
EPSS 3.8% (89th pct)2018-08-12

Common weakness types

The CWE weakness categories most often found in url-parse project url-parse CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many url-parse project url-parse CVEs were published each year.

2018

1

2020

1

2021

2

2022

4

Other url-parse project products

Browse vulnerabilities for other products by url-parse project.

All url-parse project vulnerabilities

Frequently asked questions

Common questions about url-parse project url-parse vulnerabilities.

How many CVEs does url-parse project url-parse have?: url-parse project url-parse has 8 published CVE records since 2018.
How many url-parse project url-parse CVEs are in CISA KEV?: None of url-parse project url-parse's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for url-parse project url-parse vulnerabilities?: No url-parse project url-parse CVEs currently have a tracked public exploit in this dataset.
Which versions of url-parse project url-parse are affected?: 15 distinct url-parse project url-parse versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in url-parse project url-parse CVEs?: url-parse project url-parse's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-20 (Improper Input Validation), CWE-425 (Direct Request ('Forced Browsing')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
How many critical url-parse project url-parse vulnerabilities are there?: url-parse project url-parse has 3 critical and 0 high-severity CVEs.
What is the average severity of url-parse project url-parse CVEs?: The average CVSS base score across url-parse project url-parse's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track url-parse project url-parse vulnerabilities

Monitor new url-parse project url-parse vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing